Security Advisory

CVE-2026-63228

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-29 06:08:36
Last updated 2026-07-29 15:23:31
Assigner CSA
CVSS score not scored
State PUBLISHED

Description

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.